hxxps://accounts[.]ebay[.]com/acctsec/security-center

Analysis

user interaction
yes
max time kernel
46s
max time network
38s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 15:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://accounts.ebay.com/acctsec/security-center
Sample261006-spjrdafd39

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5968	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{ABDA25F8-A3C4-4638-9A5A-6F7372FC4C46}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{F2F098A8-9AC1-4C4B-B7E8-48ACA37BCE3F}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 1548 wrote to memory of 4356	1548	msedge.exe	88
PID 1548 wrote to memory of 5968	1548	msedge.exe	89
PID 1548 wrote to memory of 5108	1548	msedge.exe	90
PID 1548 wrote to memory of 5108	1548	msedge.exe	90
PID 1548 wrote to memory of 5108	1548	msedge.exe	90
PID 1548 wrote to memory of 2872	1548	msedge.exe	91
PID 1548 wrote to memory of 2872	1548	msedge.exe	91
PID 1548 wrote to memory of 3796	1548	msedge.exe	92
PID 1548 wrote to memory of 3796	1548	msedge.exe	92
PID 1548 wrote to memory of 6136	1548	msedge.exe	93
PID 1548 wrote to memory of 3796	1548	msedge.exe	92
PID 1548 wrote to memory of 6136	1548	msedge.exe	93
PID 1548 wrote to memory of 6136	1548	msedge.exe	93
PID 1548 wrote to memory of 4132	1548	msedge.exe	98
PID 1548 wrote to memory of 4132	1548	msedge.exe	98
PID 1548 wrote to memory of 2624	1548	msedge.exe	99
PID 1548 wrote to memory of 4032	1548	msedge.exe	100
PID 1548 wrote to memory of 4032	1548	msedge.exe	100
PID 1548 wrote to memory of 4032	1548	msedge.exe	100
PID 1548 wrote to memory of 5044	1548	msedge.exe	106
PID 1548 wrote to memory of 5044	1548	msedge.exe	106
PID 1548 wrote to memory of 2548	1548	msedge.exe	107
PID 1548 wrote to memory of 2548	1548	msedge.exe	107
PID 1548 wrote to memory of 1080	1548	msedge.exe	109
PID 1548 wrote to memory of 5152	1548	msedge.exe	119
PID 1548 wrote to memory of 2180	1548	msedge.exe	120
PID 1548 wrote to memory of 5976	1548	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://accounts.ebay.com/acctsec/security-center
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x20c,0x260,0x7ff868a4c188,0x7ff868a4c194,0x7ff868a4c1a0
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,15968635551961144860,1543472893444918470,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,17246239383407831140,14370045586965057398,262144 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,835202726719041387,2996737008244527674,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,12162225991835605609,10984719920652230682,2097152 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,13736726300696250387,6757190245853797582,2097152 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,649586254149526916,8575162974521262094,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,12419675192286267165,15628999099687411759,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5116,i,8591887885745882233,17269985794355169603,2097152 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,5987109609349996778,5204147894860513649,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,2275987410188865367,11724519719791986756,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,12497937449387503542,5512264736413393364,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,12497937449387503542,5512264736413393364,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,10543338468610846324,5414241707541237415,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,5633378983255550316,15610270558416205482,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,1621682329528146981,6849320620358235354,524288 --field-trial-handle=2280,i,4680499025290326875,4361690344884048275,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  PID:5976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

62b1cbe6-8620-4812-809a-75b2a1b6ba01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\62b1cbe6-8620-4812-809a-75b2a1b6ba01.tmp
Size 25KB
SHA256 3fb55ada122381a77f72f10e5bc772b5f5e5254b6481583c6699ac3d0ed70e7d
MD5 7cadcc26651091bb5eb1b3f4213a9e07
SHA1 e793735619ee7c7678ff2c2a5331f35685059a67
SHA512 7025d05c3591533c724e379a8e2cbfbef60c6be234afc7f683d85c6d84bac07750714f3f047a9f74c67562176729c44761ce5200d73a97699627ee779893322f
SSDEEP 384:noiFiZcI63sNT8TUNTUlIm25mg56n4zf8BWFAnLtt4rsa+VYqgL/7IzNo5:zFQ632wgSBJBWFi5t4rhgVO
TLSH
T10FC23836EC98DABBECEB8F95AB4A7A47DEF0016385DC59C4DAD85D1D008719D0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

1668fe99-3243-4699-a1e2-8fb7803daca7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1668fe99-3243-4699-a1e2-8fb7803daca7.tmp
Size 649B
SHA256 6a0d7f90770b97948c4f1d696f35b49f2f11ad63c3facfd364717af16505b0a2
MD5 11e84764867266dc2f5b4d3426dc4696
SHA1 8c7341f47c54f25b59c4ca2defffe0cc9ffae089
SHA512 71685bf45748203336497e877dc263837c3b6cf0cc73cdb43c65eaf40e1093120a5f47dd2531a8b8b0e063525dc7723c364724f076abb9f28cffe9dcceb60880
TLSH
T137F0F9B5C825AC3B08FC5B1820A44786E75113672780884F3B3D811D8FB263B858681C
MD5 SHA1 SHA512 TLSH

Submit Download

337d8779-ae91-4407-a135-5d5c8f7cf899.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\337d8779-ae91-4407-a135-5d5c8f7cf899.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

3c836f2d-7815-4128-a241-afc463f547bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3c836f2d-7815-4128-a241-afc463f547bb.tmp
Size 27KB
SHA256 9c96c636b82d86bbdb2a11cc00577c970a5d4a847b819cff6a4e50e7334429c3
MD5 b8af9ee24882a62aa26f99aa952807b5
SHA1 40fb5f7bb1991cb5064598df778f6eb57f29216a
SHA512 eee71f56a430d2f0d594b3d7775d8f51c347bd4c94e7a06915af9698228f8e2c9c0727c58f062b6e80508328710468dc3df1a65a32eaef95009b8ae01fcb7a97
SSDEEP 768:0RyktrnWvDBtt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroG1K:0RyktrnWvDBttu1jaLWLywf0G0
TLSH
T19DC20A3F640CCB7E5FC01E9D9C6A6F872DE802CBA6548D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

792e256a-4981-41a1-b388-7db4880f99ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\792e256a-4981-41a1-b388-7db4880f99ed.tmp
Size 12KB
SHA256 415650a97e48eb87fbf3f858c8d6aea8906cf8cfa4b1f188b86cd3a8a94b9387
MD5 83a4ebcf8b625bb42d4168cfe1e8e014
SHA1 1d0da214c863d6a7dadb9c09320d17489a8c17cf
SHA512 9ba5373d2be147d673009747a44979668f6d661cc5133651e0a328c17c8be1476f40a3b9f1c42a55ed7ec1401908ee3b88f78846c8e7719613f890ef289145ca
SSDEEP 192:sxZ/RFkH/fKsAQZZVMzodp9ipUHW6+WN9bDXYbIF3YGl7pZIg5uoJ:sxZ/IH/fKsAOZVPlHbhXFNYGpMM
TLSH
T11842D855AE38A97B8CC7D219FA55BF53D3F95032A1D41E48AAFC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000059

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
Size 20KB
SHA256 8027610d99a16c9a2c82b87199baa69dfeba16eea646275d759ba2e2fbf28e48
MD5 2dcb210c9a8d5682b5032f788127ec3f
SHA1 99ddd146124d5490d28541b549b071d60cced29c
SHA512 1d6a75390ea86276bb8b2d64d5edcde892baa4501bd08168553059c84a339b0873184a4496c127f813f0a529fc37f88382e0761685c6a48d81d7f8e26a9c4516
SSDEEP 384:AarnwUukeEh9EYge3J0xEiGxUyDPXH0N+kg7tUCsPLXSb6NP9pm:rwUujEh9Tt3JFJPXUNPg7qCmvP9c
TLSH
T15092E106EC87EF53C8120470DB6E64349AD0C54F1E1BB089E862A61D1FF876635BE97D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5678182ee808e3e715bfd659dfb7cd71d07b66ae8b5170c6cb55fadb69d477ff
MD5 1af33e332c8bd6fe13f6bea883c2af99
SHA1 3851db3518719a9914a2f7a7f5a919474f2af13c
SHA512 22671eb82786bdc80b8a2de028d1fd7b4ac3b9514005235dbfcb5bf47e7d80b07905837af74915b567c1719d906707ffc524dc69e2b0b1db9230821eb457c63f
TLSH
T11F61B54CE89940A0FFB894F4C6DA15C73E312EFE494F2E5186A4DAB8680B797CD100C7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4cf425db6b3f1feab8776ca878d7e9715dd11558a367d85e8c19bc895cfba122
MD5 011f34ca544c33ae011edcfb3f1f133c
SHA1 341d142a9665b49156679b8b11a724d9e5478330
SHA512 91a4429661033159933b46562b4df1ff12649ddedb606e4952353fb297d41267d8b4b5f79d2d03fb948fc3422f42b5da1c475db684a1e71f14e4bed7ac4915ef
TLSH
T12F717148D4999260FF7454F8CAD518833E702EFE498F2F128A94DA747C0B7978E521D7
MD5 SHA1 SHA512 TLSH

Submit Download

25221245-1920-4851-b225-75cffc9aca94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\25221245-1920-4851-b225-75cffc9aca94.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0fc65506-d919-4c36-9857-1b156d2478d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0fc65506-d919-4c36-9857-1b156d2478d5.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

3294de8d-5a5c-4188-992e-21293faf835e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3294de8d-5a5c-4188-992e-21293faf835e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ef04fd481d568ffbe0adf692b30a2672300dca94c719753eb4b3bf44c3682693
MD5 8e4732f3a78ab5b1bbabf96b03f527e9
SHA1 f3baec2cf396edecc4474b9f861ccf357bc625d2
SHA512 f3c6169306543fb6bd1203f890c339a0fcebcdde1d492397cb2c609bc80c3eb3322a2d4907440ea332c20d9c6461aeaae559cad4c47cb97004fda81742be1950
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvX+A1T:OtfFvpopPxrB4Rhf+ET
TLSH
T1C8B2231471BB021138FE690881B5976F064232B33259E63B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\a20e96fc-d2c1-473b-8171-e408b4ee2360\index-dir\temp-index
Size 72B
SHA256 44f787e8029cbcb47be8fc8e1df538b45806931d769429796f9299a3f8c852c2
MD5 8f0c84c257f98173a484a9bce465bc8f
SHA1 9bb68dd61d93c085db0a2019e3e07c524dbea468
SHA512 0037f0e41497baaf3195e0629b534b1b316f3e39b3eecc1e22d4ff88ab0cde28411900aad21f488dc8ccdbc62321f6cfac0fca3c0422c8302ed6942847dec366
TLSH
T114A0022063C56454E0610578B1050FB52304D950D40527038598418C9C552E85925525
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\a20e96fc-d2c1-473b-8171-e408b4ee2360\index-dir\the-real-index
Size 48B
SHA256 a4f1fa98d1d54ec2efe1cf739ee1009a472b3cedba33214445dbb2d13b269cf5
MD5 23e5d6a2408b0e461e69e76cfd6cffcd
SHA1 fd359e6087b447697c246ad4a5e1eef3c9d09f3b
SHA512 60920cad80c5c50fcc1fd45bc1908e8b724b04435caef5ca204c5d1008d181d4bc877e340687daf5338d52fbebd9e518cdec418395a321779172cfb5fb5ba4c4
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 175B
SHA256 bae2f80b4a4f83e9b62273608dbbadfa36773d0e8f31d89de628c3171d7d098c
MD5 9332d9f540a83d1e69b9acda214604b4
SHA1 e098fe3c4fa80e6cdf7cdb7f1b6028dafc3f33f8
SHA512 53c02a693163400171bcc2948e91c45578e6fa0fa6118232349b287e0efd918b286229e3c64efeb151e64ce2600cb6ca87a8be6f0563b43d1beb68083752adda
TLSH
T170C08CB750D099D12FB028FB022732C9C977BFC80CC0EAAC8C253099323087A0000D38
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt.tmp
Size 88B
SHA256 1dfeb7cfb3b472e3668f013324932bbd143456305d6d4e4aad52b21785db5f2b
MD5 208d884fd8ad4b20257c4e246a00c2f7
SHA1 d0aa8ab673dd8e6a12386b2e5371d0b16509df06
SHA512 999ce0bca709f5abad7a6fc7ae3a3ac88b8de2e6dceb90b19453d1f47e21eb101296d452d5db0eb19ad934e3d823bdb45ebc2716692f57babfcc3258829ed748
TLSH
T123B002BB145555D55EB134F7001932DDC46372C85CC0EE9D8571205C36105BE1005D28
MD5 SHA1 SHA512 TLSH

Submit Download

b8994984-cbd3-4422-882d-406e1a4eddcc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8994984-cbd3-4422-882d-406e1a4eddcc.tmp
Size 12KB
SHA256 31d362d88c2f4ac4b8af5d46b10741903dc148058b373b09fa425ebd4b0eaac2
MD5 ec9d1e6dabff131dd224918f43a21774
SHA1 fa574f280a056af4138aacddd7ca0a8df2d331fd
SHA512 65ea95785eb9726290e87752c5241c1ee47dc3e5c5ca4bb8750065855ed16a72fde330ab53183484d90a0fbfb863de0669450d42bfff3ce5cfe73584ad06fc7a
SSDEEP 192:sxZ/RFkH/fKs1QZZnMzodp9inCHW6+WN9Eh/YbI+3YGl7pZIgjoJ:sxZ/IH/fKs1OZnP5Hba/FkYGpjM
TLSH
T11742B655AE38A97B8CC7D219FA15BF53D3F95032A0D41E48AAFC8A1C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc6fe2ff-28dd-4a8b-8905-da3d7476ad6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc6fe2ff-28dd-4a8b-8905-da3d7476ad6c.tmp
Size 12KB
SHA256 e07a7093c3e2e2e351e63cc76e69abc5fbcc777910d3486be1acccf71d3ec795
MD5 2b49e5bb86d99b752f536521b78c3111
SHA1 34bcd10fd8acef8bc2ce2a5e7d74661f4676c79f
SHA512 07823ff19f32f3883841d36baca39ac3f9a49a9ce489040ae095055fb511ce68e77018bf02d17e6d3c6a7eb8af56f9bfa89a6077b0f9e7237348d59afb300b29
SSDEEP 192:sxZ/RFkH/fKsGQZZVMzodp9ipUHW6+WN9bDXYbIh3YGl7pZIg5uoJ:sxZ/IH/fKsGOZVPlHbhXFBYGpMM
TLSH
T12E42D855AE38A97B8CC7D219FA55BF53D3F9503291D41E48AAFC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a90679b0-3573-4146-b004-6b311552ce2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a90679b0-3573-4146-b004-6b311552ce2d.tmp
Size 26KB
SHA256 4353703039d5dee5856f41508b06d13bc6c3c879a2cdb6e9f646589b4df9bfcf
MD5 e6ba0a1a2706015df2d1b8378fc1a4ce
SHA1 c630e8e038cf5890ec418a2c17420d1ca7a33771
SHA512 8e0f3c0a1b947e3ca62aaeee36850b93246b9b8c31a2405f14c74bff99323af354a9f7c1f62aa494442befecb7f16363176a40e9a61c90ee9640a971fd6fe213
SSDEEP 384:nQiFiZcIZ3sNk8TUNTUlI4/5mgjRgyj4zf8BWFAnLtt7s/VZh6DKhHatgL/7IzR9:rFQZ31wgLudBWFi5tY/fYGHaD9
TLSH
T152C25A32ECA4DABBECEA8A95A74A3B47DEF04153C6CC99C4D6C95D1D00D719D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdf13cce-9a27-4c7f-a117-6a0e068b3e90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bdf13cce-9a27-4c7f-a117-6a0e068b3e90.tmp
Size 26KB
SHA256 884977004843e3e7af529c12ba3774f7622d48562bb70a6cc4b65ab8acc3cc77
MD5 2ad6f36aec4cd137301d05e733dea4d3
SHA1 649f59f6c41250ad3dfa1b5fa83b82c0f4cea4fd
SHA512 052a57d53dac1b9be4cc7782c70f8399e44e828714745c9792c5cbe8d008f5b85ec0bf3943644251daf4f5f9df24cd933a2f584ce1b2c19d3a2196f1af267f04
SSDEEP 384:nXiFiZcILsNk8TUNTUlI4/5mgjQgyj4zf8BWFAnLtt7s/VZh6DKhHatgL/7IzRoy:SFQL1wgLLdBWFi5tY/fYGHaD9
TLSH
T1C8C25A32E8A4DABBECEA8A95A74A3B47DEF04153C6CC99C4D6C95D1D00D719D030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 43fe7c39a8701528133221d0b31e3cee39a097e62f395436283992a151b24c12
MD5 cc82818a1584639489645cde2d504562
SHA1 52b9204b457be0aee45a7df0ce3f545fd04c8c55
SHA512 01b04e2692a339f74a8b057583b8efcf64e0bdfe814359561c326a5bb2e27ed056ecee7c61f651f33a304f067b3c4cd9a0a9ba169e63817a4490a340e61ef74d
TLSH
T18B412A58A6FA1148B3B76F16AFF669AE487A7D772E06D45D00110E0F0A22A00CDB2733
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads